14319 matches found
PT-2022-21180 · Siemens · Sinema Remote Connect Server
Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.1 Description: A vulnerability has been identified that could expose sensitive user information. This occurs when a customized HTTP POST request forces the application to write the status of a...
Siemens SINEMA Remote Connect Server
1. EXECUTIVE SUMMARY CVSS v3 4.2 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SINEMA Remote Connect Server Vulnerabilities: Improperly Implemented Security Check for Standard 2. RISK EVALUATION The affected application is missing general HTTP security headers in the web servers...
Siemens SINEMA Remote Connect Server 输入验证错误漏洞
SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.Siemens SINEMA Remote Connect Server input validation error vulnerability, which could be exploited by an...
PT-2022-21187 · Siemens · Sinema Remote Connect Server
Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.1 Description: A vulnerability has been identified in the SINEMA Remote Connect Server, where the affected application contains a file upload server that is vulnerable to command injection. Th...
Siemens SINEMA Remote Connect Server 安全漏洞
SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.A parameter handling error vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from ...
Siemens SINEMA Remote Connect Server 跨站脚本漏洞
SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.A cross-site scripting vulnerability exists in Siemens SINEMA Remote Connect Server, which could be...
Siemens SINEMA Remote Connect Server 安全特征问题漏洞
SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunneled connections VPNs between headquarters, service technicians, and installed machines or plants.A standard security check implementation error vulnerability exists in Siemens SINEMA Remote Connect...
PT-2022-21183 · Siemens · Sinema Remote Connect Server
Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.1 Description: A vulnerability has been identified in the affected application, which contains an older feature that allows importing device configurations via a specific endpoint. An attacker...
Siemens OpenSSL Affecting Industrial Products
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINEMA Remote Connect Server Vulnerabilities: Multiple 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, disclose...
Security Bulletin: IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service, due to OpenSSL (CVE-2022-0778)
Summary IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service, due to OpenSSL CVE-2022-0778. This affects the version of node.js and DataDirect ODBC driver shipped with IBM App Connect Enterprise and IBM Integration Bus. The fix includes OpenSSL 1.1.1n Vulnerabili...
Security Bulletin: Vulnerability in IBM Java SDK affect IMS™ Enterprise Suite: Connect API for Java, Explorer for Development, and SOAP Gateway (CVE-2015-7575).
Summary There is vulnerability in IBM® SDK Java™ Technology Edition, 6.0.16.15 and earlier, 6.1.8.15 and earlier, 7.0.9.20 and earlier, 7.1.3.20 and earlier, 8.0.2.0 and earlier that is used by IMS™ Enterprise Suite: Connect API for Java, Explorer for Development, SOAP Gateway. This issue was...
Security Bulletin: Vulnerability in IBM Java SDK affect IMS™ Enterprise Suite: SOAP Gateway, Connect API for Java, Explorer for Development (CVE-2015-4872).
Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 8.0.1.10 and earlier that is used by IMS™ Enterprise Suite: SOAP Gateway, Connect API for Java, Explorer for Development. This issue was disclosed as part of the IBM Java SDK updates for October 2015. Vulnerability Detai...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring and IntegrationServer operands may be vulnerable to code injection due to CVE-2022-29078
Summary Node.js module ejs is used by IBM App Connect Enterprise Certified Container for JavaScript templating. All IBM App Connect Enterprise Certified Container DesignerAuthoring operands, and IntegrationServer operands that run Designer flows may be vulnerable to code injection. This bulletin...
Malicious code in stripe-connect-rocketrides (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e97a2c94dcfd44ffb0f5732e910f9abf4e1c2e2d188c646dfb13cb8fd1c4eef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6330 Malicious code in stripe-connect-rocketrides (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e97a2c94dcfd44ffb0f5732e910f9abf4e1c2e2d188c646dfb13cb8fd1c4eef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Job Writing to Cloud Connect Repository Fails with: "Target gate has rejected connection. Connection target is not recognized. No rule exists."
Challenge A Veeam Cloud Service Provider observes that their tenant's jobs intermittently fail with either of the following errors: Error Cloud gate has rejected connection. Reason: Connection target is not recognized. No rule exists.. System.Exception Error Connection target is not recognized. N...
Security Bulletin: IBM App Connect Enterprise Certified Container Operator and IntegrationServer operands may be vulnerable to denial of service due to CVE-2021-44716
Summary IBM App Connect Enterprise Certified Container Operator and IntegrationServer operands may be vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability CVE-2021-44716. Vulnerability Details CVEID:CVE-2021-44716 DESCRIPTION: Golang Go i...
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to code injection due to CVE-2022-21803
Summary Node.js module nconf is used by IBM App Connect Enterprise Certified Container operands for loading default configuration values. IBM App Connect Enterprise Certified Container IntegrationServer, Dashboard and Designer operands may be vulnerable to code injection if the configuration file...
Security Bulletin: IBM App Connect Enterprise Certified Container Operator and IntegrationServer operands may be vulnerable to denial of service due to CVE-2021-39293
Summary IBM App Connect Enterprise Certified Container Operator and IntegrationServer operands may be vulnerable to denial of service if forced to process a malicious archive stream. This bulletin provides patch information to address the reported vulnerability CVE-2021-39293. Vulnerability Detai...
